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Abstract 

It is well known that quantum computers can efficiently find a hid- 
den subgroup H of a finite Abelian group G. This implies that after 
only a polynomial (in log | G| ) number of calls to the oracle function, 
the states corresponding to different candidate subgroups have expo- 
nentially small inner product. We show that this is true for noncom- 
mutative groups also. We present a quantum algorithm which identi- 
fies a hidden subgroup of an arbitrary finite group G in only a linear 
(in log |G|) number of calls to the oracle function. This is exponen- 
tially better than the best classical algorithm. However our quantum 
algorithm requires an exponential amount of time, as in the classical 
case. 



1 Introduction 

A function / on a finite group (with an arbitrary range) is called H-periodic 
if / is constant on left cosets of H. If / also takes distinct values on distinct 
cosets we say / is strictly -ff-periodic. Furthermore we call H the hidden 
subgroup of /. Throughout we assume / is efficiently computable. Utilizing 
the quantum Fourier transform a quantum computer can identify H in time 
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polynomial in log |G| . The question has been repeatedly raised as to whether 
this may accomplished for finite non-Abelian groups [|], HJ. 

This time bound implies that only a polynomial (in log \G\) number of 
calls to the oracle function are necessary to identify H. The main result 
of this paper is that this more limited result is also true for non-Abelian 
groups. In other words there exists a quantum algorithm which informa- 
tional theoretically determines the hidden subgroup efficiently. One may also 
view this as a quantum state distinguishability problem and from this per- 
spective one may say that this quantum algorithm efficiently distinguishes 
among the given possible states. This result may be seen as a generalization 
of the results presented in |fflj although in that work the unitary transform 
was also efficiently implement able. The quantum algorithm presented here 
requires exponential time. An important open question is whether this may 
be improved. Even if a time efficient quantum algorithm does exist one 
must also inquire as to the complexity of postprocessing the resulting in- 
formation. For example in the case of the dihedral group presented in 
although the hidden subgroup is information theoretically determined in a 
polynomial number of calls to the oracle, it is not known how to efficiently 
postprocess the resulting information to identify H. 

Theorem 1 (Main) Let G be a finite group, f an oracle function on G 
which is strictly H -periodic for some subgroup H ^ G. Then there exists 
a quantum algorithm that calls the oracle function 4 log |G| + 2 times and 
outputs a subset ICG such that X = H with probability at least 1 — 1/|G| . 



2 The Quantum Algorithm 

Let G be a finite group, H ^ G a subgroup, and / a function on G which is 
strictly if -periodic. For any subset X = {x±, . . . ,x m } C G, let \X) denote 
the normalized superposition -j=(\xi) + • • • + \x m }). The Hilbert Space TL 
in which we work has dimension \G\ m and has an orthonormal basis indexed 
by the elements of the m-fold direct product {\(gi, . . . , g m )) \ gi G G}. The 
first step in our quantum algorithm is to prepare the state 

-r== \9i,---,9m)\f(gi),---,f(g m ))- (i) 

VI I gi ,...,g m eG 

We show below that picking m = 4 log \ G\ + 2 allows us to identify H with 
exponentially small error probability. 
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By observing the second register we obtain a state which is a tensor 
product of random left cosets corresponding to the hidden subgroup H. Let 
| if) = \cl\H) ® \cL2H) ig) ••• <g> |a m P~) where {ai, . . . ,a m } C G. Further, for 
any subgroup K ^ G and any subset {b±, . . . ,b m } C G, define 



The key lemma, stated formally below, is that if K ^ H then (^\^(K, {gt})) 
is exponentially small. 

Let TCk be the subspace of 7i spanned by all the vectors of the form 
\ty(K,{bi})} for all subsets {bi}. Let Pk be the projection operator onto 
TLk and let P% be the projection operator onto the orthogonal complement 
of Tix in 7i. Define the observable Ak = Pk — Pjq- Choose an ordering of 
the elements of G, say, gi,g 2 , ■ ■ -,g\G\- 

The algorithm mentioned in Theorem [l| works as follows. We first apply 
j4( 9i ) to |^), where (g) ^ G denotes the cyclic subgroup generated by g £ G. 
If the outcome is —1 then we know that g\ H, and if the outcome is +1 
then we know that g\ € H with high probability. We then apply A^ to 
the state resulting from the first measurement. Continuing in this manner 
we test each element of G for membership in H by sequentially applying 
Ai g2 \, ^4( S3 ) and so on to the resulting states of the previous measurements. 
(Of course if we discover g 6 H then we know that, say, g 2 6 H and we 
can omit the test A^ g 2y) We prove below that each measurement alters the 
state insignificantly with high probability, implying that by the application 
of the final operator j4( 9|G| ) we have, with high probability, identified exactly 
which elements of G are in H and which are not. 

Lemma 2 Let K < G. If K £ H then (^\P K \^) < ±. If K < H then 
(*|Pjc|*) = 1. 

Proof Let \H n K\ = d. Notice that for all 51,52 £ G we have either 
\gi H n g 2 K\ = d or \g\H n g 2 K\ = 0. This implies that if \g\H n g 2 K\ = d 
then ( gi H\g 2 K) = d/y/\H\\K\. Therefore 



There exist exactly (\H\/d) m vectors of the form \^(K,{bi})) such that 



<*|*0MM)> ^ nonzero. Hence, <tt|i^|tt) = (M)™( ^ )™ = ( d ) 



V(K, {h})) = \b x K) ® \b 2 K) ® • • • ® |& m *Q. 



(2) 




HK&H then | < 1/2, and if if < H then d = |if 



□ 
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Let |^o) = |^)- F° r 1 < i < | C| , define the unnormalized states 

Then (vt^l^) equals the probability that the algorithm given above answers 
correctly whether gj £ for all 1 < j < i. Now, for all < i < \G\, let 
\Ei) = |¥> - 

Lemma 3 For <xW < £ < |G|, t</e /lave (Ei\Ei) < j^. 

Proof We prove this by induction on i. Since l^o) = \^) by defini- 
tion, \Eq) = 0. Now, suppose that (Ei\Ei) < ^r. On the one hand, if 
g i+1 G H, then = P( Si+1 >(|*) - |^)) = |*> - P( 9l+1 )\Ei}. Hence 

(i^j+il-Ej+i) < (Ei\Ei) < On the other hand, if gi + \ H, then 

= P ( t +1> (I*) " l^» = I*) " JW>I*> - By Lemma | 

we then have (£ m |£ m > 1/2 < ^ + (^|^i) 1/2 < □ 

lei 2 

Since |^|g|) = — l-^IGl) an d (-^IGI l-^IGl) — 2^ by the above lemma, we 
obtain the following lower bound for correctly determining all the elements 
of H. 

Lemma 4 (%||%|) > 1 - |§. 

By choosing m = 4 log \G\ + 2, the main theorem follows directly. 

3 Conclusion 

We have shown that there exists a quantum algorithm that discovers a hid- 
den subgroup of an arbitrary finite group in 0(log |G|) calls to the oracle 
function. This is possible due to the geometric fact that the possible pure 
states corresponding to different possible subgroups are almost orthogonal, 
i.e. they have exponentially small inner product. Equivalently stated, there 
exists a measurement, a POVM, that distinguishes among the possible states 
in a Hilbert Space of dimension \G\ m where m = 0(log \G\). The open ques- 
tion remains in regard to the existence of a POVM which not only distin- 
guishes among the states but is efficiently implementable and the resulting 
information is efficiently postprocessable. 
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